Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b29dc7d7-61d5-3c99-9b64-7808b9ff71ea.roa
File:                     b29dc7d7-61d5-3c99-9b64-7808b9ff71ea.roa (raw, json)
Hash identifier:          tG98CEi4+sQFX9vMZrpdbyxR7eDbiS11OC/hl+F8DJQ=
Subject key identifier:   5D:41:C8:5F:16:37:61:3B:C8:31:5E:B3:16:4D:1D:1B:85:9C:96:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315FA9693AF60ED004A3B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b29dc7d7-61d5-3c99-9b64-7808b9ff71ea.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     32747
IP address blocks:        207.179.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:fa:96:93:af:60:ed:00:4a:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=7752791e-0976-4bbe-811d-63924059abb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:bb:3b:de:21:f1:27:d1:74:74:8b:88:d0:
                    f4:82:8d:06:cc:f2:08:3b:64:60:f1:f5:d3:b7:04:
                    89:e3:48:9c:3b:f9:d2:c4:d7:c2:e5:e4:49:17:e9:
                    26:42:0d:8a:0a:bb:10:fb:6a:04:b9:31:db:d3:71:
                    d0:3b:f6:f6:9b:ca:84:df:3b:fd:ba:f3:d9:b3:77:
                    6c:09:5e:5b:a1:b6:ef:67:84:35:37:18:79:ea:b3:
                    9e:64:40:63:3d:4b:2f:cd:c5:98:65:38:64:f6:3b:
                    f4:ef:6a:8d:cb:3a:ce:02:1f:de:7f:67:80:1b:01:
                    75:33:7e:da:7d:87:e6:71:37:39:02:9a:fd:80:e5:
                    75:cc:80:b8:fd:5a:41:17:bf:2f:ae:0e:be:1a:c9:
                    bd:85:97:71:25:97:f3:05:66:ce:f5:b4:7e:e9:b5:
                    96:4b:ec:5a:d0:72:00:ae:48:8c:7c:4b:b1:b6:f6:
                    1d:06:1b:5f:e7:ea:e7:78:ca:16:d9:14:f4:62:60:
                    2b:a5:6a:b4:20:c3:7f:92:c2:5a:6a:00:d2:bb:0a:
                    32:53:4f:29:fb:3c:07:6b:ce:2c:cb:c9:45:ca:e7:
                    f5:cf:32:8e:4a:7f:db:0c:e1:02:f6:7c:52:a2:3c:
                    b9:70:11:b6:3f:4c:63:51:7a:a0:d2:a8:84:f3:9c:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:C8:5F:16:37:61:3B:C8:31:5E:B3:16:4D:1D:1B:85:9C:96:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b29dc7d7-61d5-3c99-9b64-7808b9ff71ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:b5:94:fc:ca:03:a7:d5:d0:eb:8b:55:38:05:da:e6:0a:
         57:d1:02:92:61:fa:d6:23:a8:cf:5a:5c:ee:e9:4d:cf:78:a3:
         52:8f:d6:95:75:f6:a2:f0:3b:fd:09:cf:fb:46:8c:7c:5d:db:
         09:0a:4d:b9:11:3d:b0:0e:6b:ef:cf:ce:15:ad:7d:0d:a9:54:
         bf:67:2a:47:81:13:02:67:04:67:37:45:19:d7:26:9e:bb:a9:
         8d:7e:94:ab:8a:9b:ea:55:c5:71:5b:46:5e:76:2b:ac:53:cc:
         07:fe:bd:bb:08:f3:bb:71:ec:2d:97:e0:fc:d4:ca:89:2c:6c:
         9b:a1:cc:ee:fa:0a:9c:dc:87:a2:ea:0b:76:ce:2a:c3:8b:2a:
         60:42:25:8b:81:fc:5d:2e:d7:0d:8b:78:2f:1d:ab:b5:63:d1:
         4f:3b:77:c8:98:68:c3:4e:d9:8b:13:93:72:73:59:1d:06:31:
         9d:4b:5f:7d:a6:5e:4a:a8:b3:ab:a1:b3:b6:c7:c5:b8:e7:45:
         3f:a9:c7:0b:e5:0b:b2:fb:d1:e9:34:16:66:f5:f9:5d:ff:54:
         7e:57:12:ff:1c:d9:1b:9f:88:52:c2:a4:d7:79:4a:10:54:1a:
         de:23:8e:3e:c2:f5:75:c8:a8:e3:b9:b6:78:5c:51:cd:8b:69:
         87:de:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org